CVE

Id
18709  
CVE No.
CVE-2006-2605  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in DSChat 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatbox, probably involving the ctext parameter to send.php.  
Phase
Assigned (20060525)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
163594 18709 CVE-2006-2605 BUGTRAQ:20060522 DSChat <= 1.0 XSS  View
163595 18709 CVE-2006-2605 URL:http://www.securityfocus.com/archive/1/archive/1/434821/100/0/threaded  View
163596 18709 CVE-2006-2605 BID:18084  View
163597 18709 CVE-2006-2605 URL:http://www.securityfocus.com/bid/18084  View
163598 18709 CVE-2006-2605 VUPEN:ADV-2006-1961  View
163599 18709 CVE-2006-2605 URL:http://www.vupen.com/english/advisories/2006/1961  View
163600 18709 CVE-2006-2605 OSVDB:25734  View
163601 18709 CVE-2006-2605 URL:http://www.osvdb.org/25734  View
163602 18709 CVE-2006-2605 SECTRACK:1016148  View
163603 18709 CVE-2006-2605 URL:http://securitytracker.com/id?1016148  View
163604 18709 CVE-2006-2605 SECUNIA:20258  View
163605 18709 CVE-2006-2605 URL:http://secunia.com/advisories/20258  View
163606 18709 CVE-2006-2605 SREASON:958  View
163607 18709 CVE-2006-2605 URL:http://securityreason.com/securityalert/958  View
163608 18709 CVE-2006-2605 XF:dschat-send-xss(26641)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58118 JVNDB-2006-000314 Vixie Cron の do_command.c における権限昇格の脆弱性 Vixie Cron の do_command.c では、ユーザが設定したジョブ (プログラム) を実行する前に setuid() 関数の戻り値を適切に確認しない脆弱性が存在します。 CVE-2006-2607 18709 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000314.html  View